Sun Microsystems 820433510 Creatinga Message Security Provider, Enabling Message Security for Application Clients, Setting the Request and Response Policy forthe Application Client Conguration

Creatinga Message Security Provider
Tocongure an existing provider using the Admin Console, select Conguration node > the
instanceto Congure> Security node > Message Security node > SOAP node > Providers tab.
Formore detailed instructions on creating a message security provider, see the Admin Console
onlinehelp.
Enabling Message Security for Application Clients
Themessage protection policies of client providers must be congured such that they are
equivalentto the message protection policies of the server-side providers they will be
interactingwith. This is already the case for the providers congured (but not enabled) when
theEnterprise Server is installed.
Toenable message security for client applications, modify the Enterprise Server specic
congurationfor the application client container.
Setting the Request and Response Policy forthe
Application Client Conguration
Therequest and response policies dene the authentication policy requirements associated with
requestand response processing performed by the authentication provider. Policies are
expressedin message sender order such that a requirement that encryption occur after content
wouldmean that the message receiver would expect to decrypt the message before validating
thesignature.
Toachieve message security, the request and response policies must be enabled on both the
serverand client. When conguring the policies on the client and server, make sure that the
clientpolicy matches the server policy for request/response protection at application-level
messagebinding.
Toset the request policy for the application client conguration, modify the Enterprise Server
specicconguration for the application client container as described in “Enabling Message
Securityfor Application Clients” on page 139. In the application client conguration le, add
therequest-policy and response-policy elements as shown to set the request policy.
Theother code is provided for reference. The other code may dier slightly in your installation.
Donot change it.
<client-container>
<target-server name="your-host"address="your-host"
port="your-port"/>
MessageSecurity Setup
Chapter10 • Conguring Message Security 139